Re: NFS and Wireless and Security

From: Stefan Monnier (monnier_at_iro.umontreal.ca)
Date: 09/23/04


Date: Thu, 23 Sep 2004 18:07:39 GMT


>> Is there any way of setting up the NFS so that it will be secure similar
>> to when I remotely login in or transfer files with ssh?

> Why would it be "in the clear"?

NFS traditionally doesn't use any encryption, so anyone on the network can
eavesdrop. It's actually even worse than that because there's no
real authentication either, so they can easily access the files.
All in all it's pretty bad.

> I recognize that WEP imposes a performance hit, but is speed an issue?

WEP only protects in the sense that it tries to control access to your
network, but the problem is what happens to people who do have access to
your network (or who break WEP).

> But NFS needs a robust network connection. My experience with wireless
> is that it's often not "robust"... a high percentage of packets need to
> be resent. TCP protocol can handle this better than UDP protocol upon

Then use NFS over TCP, that's been available for a while now.

        Stefan



Relevant Pages

  • Re: Using multiple NICs
    ... one with the NFS server and one without the NFS server and a ... Lets say your NFS server is 192.168.1.100 and is thus on network ... You connect the machine with an IP of 192.168.2.199 to switch B ... two NICs, then what you want to do is bonding. ...
    (comp.os.linux.misc)
  • Re: Pull request for FS-Cache, including NFS patches
    ... What can FS-Cache do for you? ... because I haven't included patches to support anything other than NFS and the ... network vs the loading and latencies of your disk; ... caching changes for later syncing. ...
    (Linux-Kernel)
  • Re: secure nfs alternatives
    ... > for nfs, i wonder what else exists out there that has a better security ... your NFS network and become any user but not the root user on the server. ... AFS, and specifically, OpenAFS is the way to go. ... Other alternatives are Intermezzo, ARL, Coda. ...
    (comp.os.linux.security)
  • Re: GFS, whats remaining
    ... The shared storage access _is_ network access. ... be a TCP/IP network just like the one folks use for NFS (but carrying ... NFS access is because the block access network protocols are supposed to ...
    (Linux-Kernel)
  • Re: [PATCH 00/33] Swap over NFS -v14
    ... swap over NFS is a pretty rare case. ... NBD or swapping over NFS. ... sized allocations, ... One of the goals of my approach was to not rewrite the network subsystem ...
    (Linux-Kernel)